# Provision cyberArk accounts

**URL:** <https://developer.sailpoint.com/discuss/t/provision-cyberark-accounts/33255>\
**Category:** SHF Discussion and Questions\
**Tags:** provisioning, identity-security-cloud\
**Created:** [March 4, 2024, 3:38pm UTC](https://developer.sailpoint.com/discuss/t/provision-cyberark-accounts/33255 "2024-03-04T15:38:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kiranerukulla](https://avatars.discourse-cdn.com/v4/letter/k/22d042/32.png) [@kiranerukulla](https://developer.sailpoint.com/discuss/u/kiranerukulla)\
**Post date:** [March 4, 2024, 3:38pm UTC](https://developer.sailpoint.com/discuss/t/provision-cyberark-accounts/33255/1 "2024-03-04T15:38:50Z")

</div>

I want to provision PAM accounts after provisioning to an Active directory user is provisioned from sailpoint identity now. The provision needs to happen automatically once the user is cretated in AD. How i can achieve this in the Sailpoint identity now.

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [March 5, 2024, 7:07am UTC](https://developer.sailpoint.com/discuss/t/provision-cyberark-accounts/33255/2 "2024-03-05T07:07:16Z")

</div>

Hi @kiranerukulla

Welcome to SailPoint developer community.

Are you planning for CyberArk source creation in your IDN tenant or y

---

<div class="post-metadata">

**Author:** ![schattopadhy](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/schattopadhy/32/8854_2.png) [@schattopadhy](https://developer.sailpoint.com/discuss/u/schattopadhy)\
**Post date:** [April 1, 2024, 6:13am UTC](https://developer.sailpoint.com/discuss/t/provision-cyberark-accounts/33255/3 "2024-04-01T06:13:29Z")

</div>

> [@kiranerukulla](#):
>
> oned from sailpoint identity now. The provision needs to happen automatically once the user is cretated in AD. How i can achieve this in the Sailpo

@kiranerukulla you can use roles to do that:  
Step 1 create a role for cyberark  
Step 2 attach the cyberark access profile  
Step 3 In the role assignment logic check if the ad basic entitlement is there or upn contains “@”  
This will let you create CyberArk once you have ad provisioned

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [May 31, 2024, 6:14am UTC](https://developer.sailpoint.com/discuss/t/provision-cyberark-accounts/33255/4 "2024-05-31T06:14:19Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.